The Access Gateway Appliance health is incorrectly reported as green when listener creation fails and the required port is being used by another service. This is because the service creation status of the Access Gateway Appliance reflects the status of the open port.
For example, when SSL VPN is installed along with Access Gateway, and port 443 is used by OpenVPN, the service creation fails if you try to create a service with HTTPS port 443. However, because the health check is performed on the open port 443, the status is displayed as healthy.
After creating the service, use netstat to confirm that the Access Gateway ics_dyn process is running in the corresponding port.